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(54) A system for the secure transportation of articles 



(57) A system for the secure transportation of arti- 
cles such as cheques and bank notes comprises first and 
second docking stations (18) at different locations, and 
a secure container (20) which mates with the docking 
stations. The container has a number of lockable doors 
(42, 44) into which bank notes are fed by a feeder mech- 
anism (40) at the first docking station. The container has 
its own microcontroller 

which monitors the status of the doors and the integrity 
of the container, and which can respond to external con- 



trol signals while it is in transit. Once the container has 
been loaded at one docking station, it is transported to 
the second docking station at a different location, where 
it can be unloaded. A one-time code is generated each 
time the container is loaded, and must be communicated 
to the second docking station before the container can 
be unloaded. Any attempt to tamper with the container 
while it is in transit results in the activation of a dye dis- 
penser, which marks the contents of the container. 
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Description 

BACKGROUND OF THE INVENTION 

THIS invention relates to a secure system for the 
transportation of articles such as cheques, banknotes or 
other valuable articles. 

The transportation of valuable articles, especially 
cash, has become increasingly dangerous. Even the use 
of armed guards and armoured vehicles is proving inad- 
equate to safeguard valuable articles from robbers while 
in transit, or from theft or fraud on the part of employees 
handling the articles. As result, there is a need for 
increasingly sophisticated systems for safeguarding val- 
uable articles in transit. 

SUMMARY OF THE INVENTION 

According to the invention a system for the secure 
transportation of articles comprises first and second 
docking stations at respective different locations, and a 
container for articles, each docking station comprising: 
a housing defining a port for receiving the con- 
tainer; 

locating means for locating the container in a pre- 
determined position in the port; 

feed means for receiving articles and feeding 
them into an opening in the container; and 

control means for controlling and monitoring the 
operation of the docking station and for generating a 
record of articles fed into the container, 
the container comprising: 

a housing having at least one opening for receiv- 
ing articles from the feed means of the docking station; 

closure means for closing the at least one opening 
lockably; 

first operating means for selectively locking and 
unlocking the closure means while the container is 
received by the port of the docking station; and 

monitoring means for monitoring the integrity of 
the container in use and for generating an alarm signal 
if the container is opened in an unauthorised manner. 

The port in the docking station for receiving the con- 
tainer is preferably an opening extending into the hous- 
ing which is sized to receive the container. 

The locating means may comprise a tray for support- 
ing the container in the opening and indexing means for 
maintaining the container at a desired one of a plurality 
of predetermined positions relative to the opening. 

The feed means is preferably a device for feeding 
sheets such asbank notes or cheques into the container 

The docking station preferably includes second 
operating means engagable with the first operating 
means of the container to lock or unlock the closure 
means of the container selectively under the control of 
the control means. 

The control means may include data acquisition 
means associated with the feed means for reading and 
storing data identifying articles fed into the container. 



10 



15 



20 



The control means may include communication 
means for transferring data between one docking station 
and another, and between a docking station and a con- 
tainer received therein. 

The monitoring means of the container and the con- 
trol means of the docking station are preferably adapted 
to communicate so that an access code entered at the 
first docking station during loading of the container can 
be stored by the monitoring means of the container, the 
access code being transmitted independently to the sec- 
ond docking station and being entered therein when the 
container is received at the second docking station, the 
monitoring means of the container communicating with 
the control means of the second docking station to com- 
pare the stored and entered access codes and the con- 
trol means allowing unlocking of the closure means of 
the container only if the stored and entered access codes 
correspond. 

The invention extends to the docking station and the 
container independently. 

BRIEF DESCRIPTION OF T HE DRAWINGS 
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Figure 1 

Figure 2 

Figure 3 
Figures 4 & 5 

35 Figures 6 & 7 

Figure 8 



is a block diagram of a system for the 
secure transportation of articles 
according to the invention; 
is a pictorial view of a docking station 
and an "intelligent" container accord- 
ing to the invention; 
shows the container received in the 
docking station; 

are simplified block diagrams of the 
electronic circuitry of the docking sta- 
tion and the container, respectively; 
are flow diagrams illustrating the oper- 
ation of the docking station and the 
container in use; and 
is a simplified overall operational flow 
diagram of the system. 
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DESCRIPTION OF AN EMBODIMENT 

The system block diagram of Figure 1 shows a 
deposit station 10 which is typically located at the 
premises of a business, for example, and a depot station 
12 which is typically located at the premises of a bank or 
another financial institution. However, the deposit station 
and the depot station can be anywhere. Both the deposit 
station 10 and the depot station 12 have modems 14 
which aro in mmmunication with one another, for exam- 
ple, via a telephone or telecommunications network. 

The modems 14 are connected to respective corji- 
puters 16 , which are in turn connected to clocking sta- 
tions 18, each of which can receive secure "intelligent" 
containers 20. The containers 20 are transported 
between the deposit station 1 0 and the depot station via 
a transportation system, which may be a conventional 
system using armoured vehicles or the like. An overall 
monitoring system 22 monitors the operation of the dock- 



2 



EP 0 692 599 A1 



ing stations 18 at the deposit station 12, and also moni- 
tors the status of the intelligent containers 20 while they 
are in transit in the transportation system. 

In Figure 1 , the modems 18 and computers 16 are 
zL< shown as being separate from the respective docking 
\£j>~<-**tJ& stations 10 and 12. However, these components can be 
included in the docking stations . The computers 1 6 need 
not be free-standing personal computers, but can com- 
prise, for example, a computer motherboard with a disc 
drive, connected to the other circuitry of the docking sta- 
tions. 

Referring now to Figure 2, a single docking station 
18 and a secure "intelligent" container 20 a re shown. The 
docking station comprises a housing 24 with an opening 
26 formed therein which extends right through the hous- 
ing and which is sized to receive the container 20. 
Mounted on telescoping rails 28 which extend from the 
interior of the opening 26 is a folded sheet metal tray 30 
into which the container 20 can be placed. The container 
can then be pushed into the interior of the docking sta- 
tion. A knob 32 on the side of the docking station housing 
operates an indexing mechanism which engages 
spaced apart apertures 34 in the edge of the tray 30, to 
move the container selectively between several prede- 
termined positions within the docking station. 

The top surface of the docking station defines a tray 
36 for a cassette 38 (see Figure 3) which has been 
preloaded with valuable articles such as bank notes or 
cheques. At the inner end of the tray 36 is a set of feed 
rollers 40 which can either feed cheques or bank notes 
one at a time into the interior of the docking station, or 
which feed the bank notes or cheques from the cassette 
38. 

The secure container 20 is built sturdily from mild 
steel or hardened plastics and has a number of compart- 
ments which are accessed via respective electronically 
controlled sliding doors 42. A larger compartment with 
its own door 44 is provided at one end of the container. 

When the container is mounted in the tray 30 and 
inserted into the docking station, one or the other of the 
compartments in the container is aligned with a feed 
mechanism which includes the feed rollers 40, and the 
respective door 42 is opened by a solenoid mechanism 
within the container to allow the notes or cheques to be 
fed into the compartment. 

Associated with the feed mechanism is an optical 
character recognition unit and a counting device which 
both verifies the authenticity of bank notes and reads 
their denomination, and which also reads the MICR data 
from cheques. This information is stored in a control cir- 
cuit of the docking station. 

As each compartment of the container is filled, the 
container is indexed to the next point on the tray. 

Apart from cheques and bank notes, coins, mer- 
chant credit card vouchers and withdrawal cheques are 
deposited in the container, via the door 44. 

The electronic circuit of the docking station is illus- 
trated in the simplified block diagram of Figure 4. The 
docking station circuitry includes a power supply unit 92 
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which is connected in use to a power source such as an 
AC mains outlet or an)internal battery) and which both 
supplies the electronic circuitry nft^^Hnrk ing station and 
provides a battery charging output for the internal battery 
of th e secure container 20 via a connector socket 94. 
The docking station is controlled by a main micro-con- 
troller 96, which in the prototype was a PIC 16C54. The 
controller 96 controls a solenoid driver interface 98 which 
powers a plurality of solenoids 100 in the secure con- 
tainer 20, to open and close the respective doors 42 and 
44 of the container. Via a multiplexer 102, the controller 
selects communications lines between an interface cir- 
cuit 1 04 of the cheque/note feeder of the docking station, 
or an interface circuit 106 which communicates with the 
container 20 when the latter is in place in the docking 
station. 

The operation of the docking station is controlled in 
use via a keypad 46 and its status is indicated by a liquid 
crystal display 48. The docking station is connected in 
use to a personal compute' 1 6 via an RS 232 serial inter- 
face. (As mentioned above, the docking station could 
have a built-in computer instead of being linked to a sep- 
arate computer). To begin the loading operation, an oper- 
ator code is entered via the personal computer (PC) 
initialising the system and allowing notes and cheques 
to be deposited into the container. A record of the depos- 
ited cheques and notes is stored in the PC. The container 
has its own unique identity number, and this information 
and the time at which the deposit is completed is also 
stored in the PC. When the container is removed from 
the docking station, it is locked automatically under the 
control of its own electronic monitoring circuitry. A secu- 
rity staff member collecting the container enters the time 
of collection of the container and a courier reference 
number, and this information is transmitted to the bank 
or financial institution via the modem associated with the 
PC. 

In addition, a unique one-time code is generated 
when the container is loaded, which is transmitted via 
the modem of the deposit station to the modem of the 
depot station. The transmitted code is encrypted for extra 
security. When the container is received at the depot sta- 
tion and loaded into the docking station 18 there, the 
code must be entered via the PC at the depot station to 
unlock the container. The lid 50 of the container is oper- 
ated by a motorised mechanism in the container which 
is controlled by the electronic circuitry of the docking sta- 
tion and the monitoring circuitry of the container. The 
locking mechanism comprises a number of brackets 
which are rotated into or out of engagement with the 
walls of the container by the motor to lock or unlock the 
container. 

The electronic circuitry of the container is shown in 
the simplified block diagram of Figure 5. 

The container 20 has its own electronic monitoring 
system which adds to the security of the container. The 
monitoring circuitry monitors the state of pairs of optical 
sensors 56 and 58 which detect whether the respective 
sliding doors 42 or 44 are open or closed, as well as an 
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optical sensor 60 which detects opening of the main lid 
50 of the container. The wall of the container has a lining 
62 which comprises a network of parallel foil conductors, 
with alternate conductors being at ground or a line volt- 
age, so that drilling or cutting through the wall of the con- 
tainer will either cause a short or open circuit condition 
which can be detected by the monitoring circuit. 

The outputs of the sensors 56 to 62 (as well as an 
output from a radio pager receiver circuit 64, a battery 
level sensor 66, a temperature sensor 68 and a humidity 
sensor 70) are fed to a sensor interlace circuit 72. In the 
prototype system, this circuit comprised a PIC 16C71 
microcontroller which includes four analogue to digital 
convenors. The analogue to digital convertors are used 
to convert the outputs of analogue sensors such as the 
battery level sensor, temperature sensor and humidity 
sensor to digital signals for further processing by a main 
processor 74, which in the prototype was a DS-5000 
microcontroller. The main processor handles the com- 
munications and database management functions of the 
"intelligent" container. In addition, the main processor 74 
provides control signals to a dye pack control circuit 76 
and a motor control circuit 78, as well as a battery 
charged control circuit 80. The main processor 74 mon- 
itors the status of the various sensors referred to above, 
as well as a level sensor 82 which detects tilting of a con- 
tainer. 

The processor 74 has a real time clock 84 and is 
controlled by software stored in a first memory 86, typi- 
cally a pre-programmed ROM. In addition, the processor 
74 has a 32 KB non-volatile random access memory 88 
which is configured as a "disc" which is divided into 256 
sectors of 128 bytes each. The processor 74 also con- 
trols an RF communications interface 90, which allows 
communication between the "intelligent" container and a 
remote monitoring station. 

The electronic circuitry of the container is controlled 
by a rechargeable lead acid battery, which also controls 
the motorised locking mechanism of the container and 
the solenoids which control the sliding doors 42 and 44 
via the motor control circuit 78. 

The dye dispenser or dye pack in the container has 
an electrically actuated detonator or other explosive 
device which can be triggered by the dye pack control 
circuit 76 at the command of the main processor 74. If 
any of a number of possible unauthorised events occurs, 
the processor sends an actuation signal to the dye pack 
control circuit 76, which in turn detonates the explosive 
device in the dye pack, rendering the contents of the con- 
tainer unusable. If any of the sliding doors 42 or 44 are 
forced open, if the main lid 50 is forced open, or if the 
security lining of the box is damaged, the processor 74 
will detect an attempt to breach the security of the con- 
tainer and will detonate the dye pack. In addition, if the 
temperature inside the box exceeds a predetermined 
limit (typically 60°C) or if the humidity within the box 
exceeds a predetermined limit (typically 90%), the dye 
pack will be activated. These values respectively corre- 
spond to burning or immersion of the container. 



If the battery voltage drops below a predetermined 
minimum level (typically 10 volts in the case of a 12 volt 
battery) the dye pack will also be actuated. This condition 
will typically correspond to theft of the container, or a sit- 
5 uation in which the container has not reached its 
intended destination and has been lost. The processor 
74 also monitors the time which has elapsed since the 
container was dispatched from the deposit station, and 
will detonate the dye pack when the elapsed time 
70 exceeds a predetermined limit. This limit can be preset 
by the user. Finally, the radio pager receiver 64 can 
receive a remote detonation command to detonate the 
dye pack. This feature can be used if it is established, for 
example, a vehicle transporting the container is likely to 
15 be hijacked, or in another emergency situation. 

The dye used in the dye pack includes a specific 
combination of rare earth elements in trace quantities. 
Approximately 100 000 combinations are possible. By 
recording a code corresponding to the combination used 
20 in the dye pack of each container, a bank note, cheque 
or other document discovered after a robbery or other 
event causing detonation of the dye pack can be asso- 
ciated with that event. 

The container includes a further security system in 
25 the form of a connector socket 52 which receives a plug 
54 which is connected to an identity device carried by a 
guard responsible for the container. The identity device 
has a code which is input to the monitoring circuitry of 
the container when the plug 54 is inserted into the socket 
30 52, ensuring that only personnel having an identity 
device with the correct code can take charge of the con- 
tainer. The monitoring circuit may also trigger the dye dis- 
penser if the plug 54 is removed from the socket 52 
during transportation of the container. The monitoring 
35 circuit includes a timer and is arranged to trigger the dye 
dispenser if the container is opened before a predeter- 
mined period of time has elapsed after collection of the 
container. Similarly, if the container is not opened within 
a second predetermined time period, the dye dispenser 
40 is actuated. 

The simplified f tow diagrams of Figures 6 and 7 indi- 
cate the operation of the intelligent container in use. 

The simplified flow diagram of Figure 8 summarises 
the overall operation of the system in use. 
45 The system described above has a number of other 
useful features. For example, a panic button feature is 
included, allowing manual triggering of the dye pack in 
the container by a guard in a threatening situation. The 
container can include a transponder or the like which 
so must remain within a predetermined range of transmitter 
in a designated transportation vehicle to prevent actua- 
tion of the dye dispenser. The vehicle or the container 
itself is provided with a global positioning system (GPS) 
receiver or another positioning system, coupled with a 
55 transmitter which transmits the position of the container 
to a monitoring station, so that the position of the con- 
tainer is monitored closely during transportation. This 
allows action to be taken, such as the remote actuation 
of the dye dispenser in the container, if the vehicle trans- 
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porting the container deviates from a predetermined 
route 

Claims 

1. A system for the secure transportation of articles 
characterised in that it comprises first and second 
docking stations (18) at respective different loca- 
tions, and a container (20) for articles, each docking 
station comprising: 

a housing (24) defining a port (26) for receiv- 
ing the container; 

locating means (28, 30, 32, 34) for locating 
the container in a predetermined position in the port; 

feed means (36, 40) for receiving articles and 
feeding them into an opening in the container; and 

control means (90, 96, 104) for controlling 
and monitoring the operation of the docking station 
and for generating a record of articles fed into the 
container, 

the container comprising: 

a housing (20) having at least one opening 
for receiving articles from the feed means of the 
docking station; 

closure means (42, 44) for closing the at least 
one opening iockably; 

first operating means (78. 1 00) for selectively 
locking and unlocking the closure means while the 
container is received by the port of the docking sta- 
tion; and 

monitoring means (72, 74) for monitoring the 
integrity of the container in use and for generating 
an alarm signal if the container is opened in an unau- 
thorised manner. 

2. A system according to claim 1 characterised in that 
the port (26) in the docking station for receiving the 
container is an opening extending into the housing 
(24) which is sized to receive the container. 

3. A system according to claim 1 or claim 2 character- 
ised in that the locating means (28, 30, 32, 34) com- 
prises a tray (30) for supporting the container in the 
opening and indexing means (32, 34) for maintaining 
the container at a desired one of a plurality of pre- 
determined positions relative to the opening. 

4. A system according to any one of claims 1 to 3 char- 
acterised in that the feed means (36, 40) is a device 
(40) for feeding sheets such as bank notes or 
cheques into the container. 

5. A system according to any one of claims 1 to 4 char- 
acterised in that the docking station includes second 
operating means (98, 106) engagable with the first 
operating means (78, 100) of the container to lock 
or unlock the closure means (42, 44) of the container 
selectively under the control of the control means. 
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6. A system according to claim 5 characterised in that 
the first operating means (78, 100) comprises at 
least one solenoid (1 00) arranged to open and close 
the closure means (42, 44) of the container. 

5 

7. A system according to claim 5 or claim 6 character- 
ised in that the first operating means (78, 1 00) com- 
prises a motor (78) arranged to operate a locking 
mechanism. 

10 

8. A system according to any one of claims 5 to 7 char- 
acterised in that the second operating means (98, 
106) comprises an energising circuit (98) arranged 
to energise electrically the first operating means. 

15 

9. A system according to any one of claims 1 to 8 char- 
acterised in that the control means (90, 96, 104) 
includes data acquisition means (104) associated 
with the feed means (36, 40) for reading and storing 

20 data identifying articles fed into the container. 

10. A system according to claim 9 characterised in that 
the data acquisition means (104) comprises count- 
ing means for counting the number of articles fed 

25 into the container via the feed means. 

11. A system according to claim 9 or claim 10 charac- 
terised in that the data acquisition means (1 04) com- 
prises a character recognition device which reads 

30 characters on the articles fed into the container. 

12. A system according to any one of claims 1 to 11 
characterised in that the control means (90, 96, 1 04) 
includes communication means (90) for transferring 

35 data between one docking station and another, and 
between a docking station and a container received 
therein. 

13. A system according to any one of claims 1 to 12 
40 characterised in that the monitoring means (72, 74) 

of the container and the control means (90, 96, 1 04) 
of the docking station are adapted to communicate 
so that an access code entered at the first docking 
station during loading of the container can be stored 

45 by the monitoring means of the container, the access 
code being transmitted independently to the second 
docking station and being entered therein when the 
container is received at the second docking station, 
the monitoring means of the container communicat- 

50 ing with the control means of the second docking 
station to compare the stored and entered access 
codes and the control means allowing unlocking of 
the closure means of the container only if the stored 
and entered access codes correspond. 

55 

14. A secure container for use in the system of any one 
of claims 1 to 13, the container characterised in that 
it comprises: 

a housing (20) having at least one opening 
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for receiving articles from the feed means of the 
docking station; 

closure means (42, 44) for closing the at least 
one opening lockably; 

first operating means (78, 100) for selectively 5 
locking and unlocking the closure means while the 
container is received by the port of the docking sta- 
tion; and 

monitoring means (72, 74) for monitoring the 
integrity of the container in use and for generating w 
an alarm signal if the container is opened in an unau- 
thorised manner. 

15. A docking station for use in the system of any one 
of claims 1 to 13. the docking station characterised 15 
in that it comprises: 

a housing (24) defining a port (26) for receiv- 
ing the container; 

locating means (28. 30, 32, 34) for locating 
the container in a predetermined position in the port; 20 

feed means (36. 40) for receiving articles and 
feeding them into an opening in the container; and 

control means (90, 96, 104) for controlling 
and monitoring the operation of the docking station 
and for generating a record of articles fed into the 25 
container. 
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